EUVD-2026-75580

knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal...

CVE-2026-88937 knowns through 0.33.0 Path Traversal via Template Engine

knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal...

CVE-2026-88914

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...

CVE-2026-88891

OpenPanel fails to enforce read-only project access level on 26 of 29 mutating procedures, allowing read-level members to modify, delete, and publish project data. Attackers with explicit read-only access can delete reports and dashboards, schedule entire projects for deletion, publish private...

geiger

geiger A Geiger counter for AI agents. One read-only command that inventories every AI agent, harness, MCP server, plugin, and AI extension on a machine — and tells you, in plain language, what each one can touch. root@kitploit: npx geiger-scan No install. No account. No telemetry. Reads configs...

github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution

A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink,...

vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator

A flaw was found in Vim. A remote attacker could exploit a heap-based buffer overflow and an out-of-bounds read vulnerability in Vim's terminal emulator. This occurs when processing specially crafted Unicode supplementary plane characters, potentially leading to information disclosure and denial ...

WordPress AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter vulnerability

WordPress AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin = 11.0.4 - Unauthenticated Arbitrary File Read via 'username' Parameter vulnerability discovered by daroo in WordPress Plugin AcyMailing SMTP Newsletter versions = 11.0.4...

wp-user-registration-vuln-checker

针对 CVE-2026-1492 的 WordPress 用户注册检查器 用于检查可能受 User Registration & Membership 插件中 CVE-2026-1492 影响的自有 WordPress 站点的只读检查器。 它帮助站点所有者确认插件暴露情况，并寻找失陷指标，例如隐藏的管理员账户、可疑上传、计划任务条目和被篡改的文件。 从这里开始 需求| 链接 ---|--- 浏览工具页面| https://limo57640-crypto.github.io/wp-user-registration-vuln-checker/ 阅读 Ping7 自检指南|...

EUVD-2026-75441

OpenPanel fails to enforce read-only project access level on 26 of 29 mutating procedures, allowing read-level members to modify, delete, and publish project data. Attackers with explicit read-only access can delete reports and dashboards, schedule entire projects for deletion, publish private...

CVE-2026-88891

OpenPanel fails to enforce its read-only project access level on 26 of 29 mutating procedures , caused by missing access level validation in mutation resolvers. Attackers with explicit read-only access can modify, delete, and publish project data , including deleting reports and dashboards, sched...

CVE-2026-88891 OpenPanel Read-Only Access Level Enforcement Bypass via Mutations

OpenPanel fails to enforce read-only project access level on 26 of 29 mutating procedures, allowing read-level members to modify, delete, and publish project data. Attackers with explicit read-only access can delete reports and dashboards, schedule entire projects for deletion, publish private...

ktor-xxe-poc

CVE-2023-45612: JetBrains Ktor XXE Proof of Concept This repository contains a vulnerable Ktor server to demonstrate the XML External Entity XXE injection vulnerability identified in CVE-2023-45612. The vulnerability exists in Ktor versions before 2.3.5 when the ContentNegotiation plugin is used...

CVE-2025-0690

CVE-2025-0690: Integer Overflow Vulnerability in GRUB2 🛡️ Overview CVE-2025-0690 is a critical integer overflow vulnerability in the GRUB2 boot loader, allowing arbitrary code execution and Secure Boot bypass. This flaw affects systems that rely on GRUB2 for secure boot, exposing the system before...

CVE-2025-65264

CVE-2025-65264 Description In CPU‑Z 2.17 and earlier and other products that use CPU-Z driver with version 1.0.6.1 and earlier, the driver e.g. cpuz161.sys dereferenced a value from a user‑supplied address and wrote it to the system buffer supplied by the caller. An attacker could read arbitrary...

DEBIAN-CVE-2026-84828

A flaw was found in PCS Pacemaker Configuration System. A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command to read the contents of arbitrary files on the filesystem, provided the files are shorter than 256 bytes. The file contents are read wit...

CVE-2026-84828

A flaw was found in PCS Pacemaker Configuration System. A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command to read the contents of arbitrary files on the filesystem, provided the files are shorter than 256 bytes. The file contents are read wit...

CVE-2025-57819_FreePBX-PoC

FreePBX SQL Injection Checker 🔍 Safe, read-only SQLi detector for FreePBX’s /admin/ajax.php focused on template, model, and brand parameters. 🛡️ Uses error-based , boolean-based , and time-based techniques to flag potential injection without modifying the database. ✍️ Per-parameter verdicts + clean...

CVE-2021-3129-Lab

CVE-2021-3129: Laravel Debug Mode RCE Lab Hands-on lab for exploiting CVE-2021-3129 - a critical Laravel vulnerability allowing unauthenticated file read and potential RCE. Quick Start root@kitploit: Clone git clone https://github.com/theNareshofficial/CVE-2021-3129-Lab.git cd CVE-2021-3129-Lab...

CVE-2026-84828 Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token

A flaw was found in PCS Pacemaker Configuration System. A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command to read the contents of arbitrary files on the filesystem, provided the files are shorter than 256 bytes. The file contents are read wit...